Seed phrases and private keys are secret control material
A private key authorizes signatures for an account; a seed phrase commonly derives a set of wallet keys. Anyone who obtains either may be able to control associated assets.
A public address and transaction hash are different: those are normally public, while key material is not.
A backup must survive loss without creating easy copies
A single-device backup can disappear with device failure, while screenshots and cloud sync can create many unintended copies.
Choose an offline method that is readable, durable, and separated from the device used every day.
Only enter a recovery phrase in a recovery flow you chose
Restoring a wallet may require the phrase, but normal DApp connection, customer support, airdrop claims, and transaction cancellation do not.
A browser page asking to “synchronize” or “verify assets” with a recovery phrase should be closed.
Clipboard, screenshots, and sync expand exposure
Photos can be synchronized, clipboards can be read by other software, and documents can travel across accounts. Minimize digital copying of recovery material.
After a legitimate migration, remove unnecessary temporary copies.
Loss and compromise require different responses
Losing a backup while a wallet is still accessible is different from knowing that the phrase was exposed. Confirmed exposure may require a controlled migration to new keys.
A wallet provider cannot reconstruct a private key that only the user controls.
Support and block explorers can work with public information instead.
Design an offline backup plan
Use at least one backup that does not depend on the current phone or computer, record words accurately and in order, and verify legibility without repeatedly typing them into online devices.
Balance redundancy and exposure
Consider fire, water, moving, accidental disposal, and unauthorized access when selecting a storage location. More copies improve redundancy but also create more exposure points.
Periodically confirm that the backup is still accessible and readable without revealing it to anyone.
- Record the phrase accurately and offline
- Avoid screenshots, chats, email, and cloud copies
- Enter it only in a recovery process you intentionally started
- Treat suspected exposure as a key-compromise event